Cyber Defense Expert (m/w/d)
Core
Operative IT-Security expert supporting the corporate CERT in identifying, investigating, and resolving cybersecurity incidents across the organization.
Role type
Senior SOC/CERT Incident Response Analyst
Builds
Incident response workflows and threat mitigation strategies for the thyssenkrupp group
Domain
Cybersecurity / IT Security Operations
Required skills
Incident Response, Threat Hunting, Microsoft Sentinel, KQL, Splunk, Velociraptor, Microsoft Defender, Network Security, Windows/Linux Systems Administration
Preferred skills
GCIA, GCIH, GCTI, GREM, GRID, GCED, GCTD, Mandiant Practical Threat Hunting certifications
Technologies
Microsoft Sentinel, Microsoft Security Portal, Splunk, Velociraptor, Microsoft Defender, KQL
Responsibilities
Identify and investigate IT security incidents across all phases of the incident response process; Analyze malware, network traffic, log data, and attacker profiles; Triage and handle alarms via ticketing systems and hotlines; Communicate technical findings and defense measures to non-technical stakeholders; Proactively research new technologies and update knowledge base.
Seniority
Senior, hands-on IC